Sign in

Bruce ("grymoire") Barnett

@grymoire.bsky.social
136 followers 418 following 173 posts

Security gadabout, hardware hacking, Unix shell/sed/awk, magician, woodworking, maker, scientist, retired

PostsRepliesMedia
Reposted by Bruce ("grymoire") Barnett
Diffused Tactics @diffusedtactics.bsky.social · 30/09/2026
tell your friends, tell your enemies, tell your grandparents, tell the nearest stranger to sign up for GlitchCaster updates www.crowdsupply.com/diffused-tac... #hardware #hacking #tools #emfi #faultinjection #crowdsupply
crowdsupply.com
GlitchCaster
An open-source electromagnetic fault injection evaluation tool
001
Reposted by Bruce ("grymoire") Barnett
💠𝑺𝒄𝒉𝒖𝒍𝒕𝒛𝒊𝒆𝑷𝒊𝒆💠 @schultziepie.bsky.social · 27/09/2026
Please share. #Pinks
girlyfeminist girlyfeminist
l've been a SA advocate for decades:
NEVER go to campus resources for a SA. Call a rape care hotline/program (off campus), get a SA advocate (they're free), go to a SART hospital for care (and evidence collection if you choose).
They activate the police. Schools have NO business in this process and will minimize and bury it. It's a criminal matter, not an administrative matter.
Period. No exceptions.
321485685
Bruce ("grymoire") Barnett @grymoire.bsky.social · 26/09/2026
When life gets you down, be like #RoryTheCat and just #chill. It's #caturday
040
Reposted by Bruce ("grymoire") Barnett
Patrick C Miller @patrickcmiller.bsky.social · 25/09/2026
Reconstructing Device Firmware from SPI Reads hackaday.com/2026/09/24/r...
hackaday.com
Reconstructing Device Firmware From SPI Reads
If you wanted to extract the firmware from a mystery device, you might pull the flash chip out of it and toss it into a reader. But if you only had one chance to get it right and couldn’t ris…
001
Reposted by Bruce ("grymoire") Barnett
Crowd Supply @crowdsupply.bsky.social · 25/09/2026
Campaign live! ZerokeyUSB is a portable password manager for secure, cloud-free credential storage. Part of PCBWay Assembly Hub www.crowdsupply.com/depbit/zerok...
crowdsupply.com
ZerokeyUSB
A portable password manager for secure, cloud-free credential storage
011
Reposted by Bruce ("grymoire") Barnett
Molly Jong-Fast @mollyjongfast.bsky.social · 22/09/2026
This is not great
61972711984
Reposted by Bruce ("grymoire") Barnett
daniel wraith @danielroe.dev · 20/09/2026
this is a great post, btw, and pushed me to adopt tmux as my daily driver
raine.dev
My setup, and why tmux workflow is better than ever | Raine Virta
Keybindings, popup tools, and workflows for a terminal-centric setup
1132
Reposted by Bruce ("grymoire") Barnett
Jon Cooper @joncooper-us.bsky.social · 18/09/2026
👇👇👇👇
16632723412116
Reposted by Bruce ("grymoire") Barnett
Mikael Thalen @mikaelthalen.bsky.social · 16/09/2026
A hacker collective pulled down a Flock camera and dumped its data. The files included thousands of videos and logs showing that the device captured 1.6 million images of 50,000 vehicles in 21 days www.wired.com/story/hacker...
wired.com
Hackers Got Inside a Flock Camera. Its Data Shows How the System Really Works
A hacker collective pulled down a Flock camera and dumped its data. The files included thousands of videos and logs showing that the device captured 1.6 million images of 50,000 vehicles in 21 days.
112152
Reposted by Bruce ("grymoire") Barnett
404 Media @404media.co · 16/09/2026
NEW: Hackers ripped down a Flock camera above a roadway, made a near-complete copy of the data stored inside it, and shared the files with 404 Media and @wired.com, revealing in new detail how exactly Flock Safety’s cameras track the movements of both vehicles and people.
404media.co
Hackers Stole Flock’s Camera Software, Revealing How the Company Tracks Cars and People
While people around the U.S. are tearing down Flock cameras, one group of hackers went a step further: extracting the camera's software too.
13870763270
Reposted by Bruce ("grymoire") Barnett
Tom Dörr @tom-doerr.bsky.social · 14/09/2026
Disrupts 2.4GHz broadband including Bluetooth audio, WiFi, and RC drone signals for security testing using an ESP32 and nRF24 modules.
Screenshot of the repository
101
Bruce ("grymoire") Barnett @grymoire.bsky.social · 14/09/2026
Every penetration tester asks for the scope of the test. Every customer defines the scope to control the pen test. Why haven't the AI developers ever designed in scope as part of the agent's core?
010
Reposted by Bruce ("grymoire") Barnett
Patrick C Miller @patrickcmiller.bsky.social · 11/09/2026
Think twice before installing this device promising free movies arstechnica.com/security/202...
arstechnica.com
Think twice before installing this device promising free movies
In exchange for free stuff, devices make home connections part of a proxy network.
001
Bruce ("grymoire") Barnett @grymoire.bsky.social · 10/09/2026
grandideastudio.com/portfolio/se...
grandideastudio.com
Grand Idea Studio: STM32F2 / F4 Fault Injection
000
Reposted by Bruce ("grymoire") Barnett
Seeed Studio @seeedstudio.com · 07/09/2026
The XIAO ESP32-C3 handbook is now in English 📕 245 pages by Dr. Günter Spanner via Elektor — LED blinking through to a Wi-Fi weather station, parking assistant, and a deep-sleep fridge probe. 10% off with SeeedStudioXIAO until 15 Sept. Details on our latest blog 👉 tinyurl.com/bmmfzcc5
031
Reposted by Bruce ("grymoire") Barnett
Patrick C Miller @patrickcmiller.bsky.social · 08/09/2026
AliExpress accused of fingerprinting shoppers with silent audio trick that also muted a dev's headphones www.theregister.com/security/202...
theregister.com
https://www.theregister.com/security/2026/08/24/aliexpress-accused-of-fingerprinting-shoppers-with-silent-audio-trick-that-also-muted-a-devs-headphones/5291662
011
Reposted by Bruce ("grymoire") Barnett
Jon Cooper @joncooper-us.bsky.social · 31/08/2026
🚨🚨
146973804823
Reposted by Bruce ("grymoire") Barnett
Rosemary Mosco @rosemarymosco.com · 24/08/2026
Hummingbirds.
A four panel comic. In panel 1, a rufous hummingbird flies down toward a large hummingbird feeder with as many as 6 holes on top. He thinks "The humans put up a new feeder!" In panel 2, he lands on the feeder and gazes down at it. He thinks "It's huge. Many of us could feed here at once." In panel 3, we see a close up view of the hummingbird, and he's thinking "This could end the ancient rivalries. Usher in an era of peace. Interesting." In panel 4, an Anna's hummingbird hovers over the feeder and says "Hey, can I have some necta-" and the rufous hummingbird says "No."
100106052227
Reposted by Bruce ("grymoire") Barnett
Ron Filipkowski @ronfilipkowski.bsky.social · 23/12/2025
The USS Bone Spurs
128064191443
Reposted by Bruce ("grymoire") Barnett
Ron Bowes @iagox86.bsky.social · 19/08/2026
RIP to a legend in magic, Juan Tamariz www.elconstitucional.es/en/qtv/more-...
elconstitucional.es
The last "chan-tatachán" of Juan Tamariz: the magician who marked several generations dies at 83
His daughter Ana has confirmed the death of the Madrid artist, world champion in 1973, unforgettable television face and generous master of several generations of illusionists
012
Reposted by Bruce ("grymoire") Barnett
STΞVΞ HOLDΞN @sdholden.bsky.social · 13/08/2026
My first draft of my #defcon @defcon.bsky.social 34 (2026) report >> direct download PDF >> blog post TBD >> assets.libsyn.com/show/22036/D...
0166
Bruce ("grymoire") Barnett @grymoire.bsky.social · 13/08/2026
My wife was driving her 12-year-old niece in a car which didn't have GPS to the mall. Kid was puzzled. "How do you know where to go?" Wife replied "My brain." Apparently this is an expert-level skill...
000
Reposted by Bruce ("grymoire") Barnett
Robert Reich @rbreich.bsky.social · 09/08/2026
Look at this graph. The share of national income going to the richest 10 percent was lowest (and share to lower 90 percent highest) when union membership was at its highest. As unions have weakened, inequality has widened. This is why we must build back union power.
376123084708
Reposted by Bruce ("grymoire") Barnett
AlternativeTo @alternativeto.net · 07/08/2026
A command line diagnostic tool that traces any process, port, container, or file back to the exact chain that started and explains why is running in your system, not only that it exists
Diagnostic tool interface showing processes, ports, and containers, revealing their origins and resource usage across different operating systems.
122435
Reposted by Bruce ("grymoire") Barnett
Red Fox Technologies @redfoxtech.bsky.social · 01/08/2026
Know before you pass a known plate reader — without uploading your trip. FlockU Alert: offline GPS warnings on the dash. www.tindie.com/products/garden/floc… #privacy #ALPR
001
Reposted by Bruce ("grymoire") Barnett
The Media and Democracy Project @mediaanddemocracy.bsky.social · 27/07/2026
Very important concept. An additional reason why the WHCA dinner was grotesque and the harms of journalists and news orgs normalizing and democracy-washing the fascist MAGA movement From our pro-democracy election coverage recommendations:
Journalists can defend democracy.
Make threats to democracy clear!
• Inform voters of the freedoms they will lose if the
MAGA movement wins.
• Abandon false equivalence between traditional and fascistic candidates.
• Expose candidates who foment political violence.
• Call out lies and bad behavior in every piece of reporting.
• Prominently cover the Big Lie-fueled attack on election legitimacy and voting rights.
We're demanding that newsrooms improve their 2024 election coverage:
tiny.cc/prodemocracy2024
MEDIA
210145
Reposted by Bruce ("grymoire") Barnett
T. Williams @xstylus.bsky.social · 18/07/2026
If you're even a _tiny_ bit into security and privacy, pay attention to this one. A court filing in a case against cyberhacker Peter Stokes revealed Microsoft's GDID embedded in EVERY Win11 install provided the FBI the ability to trace his PC across VPNs(!!) & proxies(!!) across three countries.
windowslatest.com
Microsoft admits Windows 11 has a GDID tracker with no off switch, first documented publicly in an FBI hacker complaint
GDID is the persistent Windows ID that helped FBI trace a Scattered Spider hacker despite VPNs. Here's how it works and how to limit it.
1917451182
Reposted by Bruce ("grymoire") Barnett
Catherine @whitequark.org · 20/07/2026
the #GlasgowInterfaceExplorer revD project is up on CrowdSupply! subscribe to get updates and show your interested in the project, we're very excited to bring it to life :D www.crowdsupply.com/fully-automa...
crowdsupply.com
Glasgow Interface Explorer revD
The new and improved open source multitool for digital electronics
38624
Reposted by Bruce ("grymoire") Barnett
Steve Rattner @steverattner.bsky.social · 20/07/2026
Trump's $4 billion Presidential windfall is unprecedented in scale & source. Obama's wealth grew from royalties from books written before office, and Bush's largely came from a sports‑team stake from over a decade prior. Trump's new billions are from deals made in office.
19410233
Reposted by Bruce ("grymoire") Barnett
👻Maly Boo Tails👻 @malytwotails.com · 19/07/2026
Incredible work
313425887
Reposted by Bruce ("grymoire") Barnett
AllCuteDemocratsHere @democratcutie.bsky.social · 18/07/2026
A Special kind of stupid is way too common in this country and is only surpassed by its racism.
427144424613
Reposted by Bruce ("grymoire") Barnett
Kelly Lynne D’Angelo ✨ @kellylynnedang.bsky.social · 16/07/2026
Please blow up the public comment (included below): BREAKING NEWS (7/15) — The administration wants to destroy Chaco Canyon without consulting Tribal Nations. It’s an irreplaceable historic & cultural site with 4,700 archeological sites that could be lost to the bulldozers of oil & gas development
240693923
Bruce ("grymoire") Barnett @grymoire.bsky.social · 10/07/2026
www.mynbc5.com/article/lake...
mynbc5.com
'It's out for blood:' Burlington man recovering after beaver attack at Lake George
'It's out for blood:' A man from Burlington is recovering after being attacked by a beaver while swimming in Lake George on the 4th of July.
000
Reposted by Bruce ("grymoire") Barnett
Alt National Park Service @altnps.bsky.social · 10/07/2026
Warning! ⚠️ Things are going to be bad this midterm election. The Trump administration has fired the remaining commissioners of the U.S. Election Assistance Commission (EAC), leaving the independent bipartisan agency without any sitting commissioners.
11524751089
Reposted by Bruce ("grymoire") Barnett
Anne @anneb.bsky.social · 09/07/2026
183
Reposted by Bruce ("grymoire") Barnett
jamelle @jamellebouie.net · 08/07/2026
hold on, about to chat with mcconnell
341150381798
Reposted by Bruce ("grymoire") Barnett
🇵🇹 snipe, lixo tóxico ⭑⭒⭒⭒⭒ @snipe.lol · 07/07/2026
This will never not make me laugh out loud 😂
Two stacked panels, the first one with a simple and elegant teapot with the phrase "Dev: creates simple and intuitive UI". The panel below has a man in the blue sweater putting his mouth over the top of the teapot and blowing into it to make the tea shoot out of the spout into an espresso cup
414929
Reposted by Bruce ("grymoire") Barnett
Jeff (Hot Type) Jarvis @jeffjarvis.bsky.social · 04/07/2026
Now *this* is the way to report this story: Trump made his billion while his investors (read: his marks) lost $3.8 billion. That is theft. Gift link. Nearly a Million Investors Lost a Total of $3.8 Billion on Trump Crypto Coin www.nytimes.com/2026/07/04/u...
nytimes.com
Nearly a Million Investors Lost a Total of $3.8 Billion on Trump Crypto Coin
41713292
Reposted by Bruce ("grymoire") Barnett
Chise @sailorrooscout.bsky.social · 29/06/2026
GOOD NEWS! A personalized mRNA vaccine, known as mRNA-4157, has shown promise in keeping melanoma, a deadly skin cancer, from returning. FIVE years later, NEARLY 70% of people in the vaccine group are CANCER-FREE. The vaccine also cut a person’s risk of the cancer metastasizing by NEARLY 60%.
nbcnews.com
A personalized vaccine for melanoma cut the risk of cancer returning after five years
If the vaccine is effective in a late-stage trial, it would be “paradigm-shifting,” one expert said.
273135504475
Reposted by Bruce ("grymoire") Barnett
Scott Horton @robertscotthorton.bsky.social · 27/06/2026
But warning: he's armed and dangerous.
910539
Reposted by Bruce ("grymoire") Barnett
Dennis Detwiller @drgonzo123.bsky.social · 26/06/2026
Listen everyone, it's Mel Brooks's 100th birthday today. Let's hear it for a defender of good art. Happy birthday, Mr. Brooks!
18966551287
Reposted by Bruce ("grymoire") Barnett
Chief @isugababy.bsky.social · 26/06/2026
An ad for meta glasses was so specific to me that they actually put my husband’s face in it. This shit got me so upset at 7am!!
53611
Reposted by Bruce ("grymoire") Barnett
Allison Gill @muellershewrote.com · 24/06/2026
I swear to god I thought this was fake www.snopes.com/fact-check/t...
snopes.com
Did Trump's motorcade drive through newly painted reflecting pool?
A White House official posted a video of the motorcade crossing the landmark on May 7, 2026.
28133671039
Bruce ("grymoire") Barnett @grymoire.bsky.social · 16/06/2026
New toy
000
Reposted by Bruce ("grymoire") Barnett
Max B 💙 🔶 🇺🇦 🇬🇧 🇪🇺 @maxbrockbank.com · 12/06/2026
Sorry for the poor sound quality, but stay for the ad.
27360111961
Reposted by Bruce ("grymoire") Barnett
Morgan J Freeman @mjfree.bsky.social · 11/06/2026
😱😱😱 And just like that, it’s completely VANISHED from the media. A sitting congressman, Ted Lieu, said on the record the Epstein files are being blocked because they show Trump raped and threatened to kill children. Lets make this viral again 👇
20594615586
Reposted by Bruce ("grymoire") Barnett
Biggie @biggienotsmalls.bsky.social · 07/06/2026
07110
Reposted by Bruce ("grymoire") Barnett
Tyler King @tyleraking.com · 29/05/2026
This is seriously fucked. Like for starters they’re using commercial web analytics that are in no way in line with federal privacy disclosure requirements…
Every webpage you load is making phone calls.
Not to people, but to servers around the internet, dozens per second, all invisible to you.
When I opened TrumpRx, I right-clicked the page, opened the browser's built-in inspector, and started reading the list. Mixed in with the routine traffic was a name I recognized:
PostHog. PostHog is a Silicon Valley analytics company whose entire business model is recording what visitors do on a website and reporting it back to whoever owns the site.
Mouse movements, clicks, scrolls, keystrokes. I had not typed anything. I had not clicked anything. I had just opened the page, and it was already on the phone with PostHog telling them about me.The recordings are not anonymized. IP addresses are not stripped. And the way it is configured, the data looks to your browser like it is going back to TrumpRx, but it is actually being forwarded behind the scenes to PostHog.
That is a technique used to slip past ad blockers by disguising where the data is really going, and it is not something I expected to find on a federal health website. So I went and looked at the other sites the studio had built. Real Food, the federal food policy site. Trump Accounts, the children's savings program. The studio's own homepage, ndstudio. gov. All of them had the same vendor, the same setup, IP addresses not stripped, the same forwarding trick. And onnot stripped, the same forwarding trick. And on ndstudio. gov alone, running alongside PostHog, was something someone had built entirely by hand. Five hundred and forty lines of custom JavaScript with a name embedded directly in the code: AutoMonitor. What it appears to do is rewire the part of the browser that handles how a page talks to the outside world, so that every conversation the page has with any server gets copied and forwarded to a private backend with no public presence. The studio has the structural ability to keep a copy of every recording as it passes through their infrastructure. I cannot prove they are keeping one. The pipe is built that way on purpose, and that is the part that matters.
3825891340
Reposted by Bruce ("grymoire") Barnett
Antronics Ltd @antronicsltd.bsky.social · 26/05/2026
Indeed. There's a lot of people who seem to think that software development is just coding, but coding is just the dull & boring bit: it's the analysis, critical thinking, design, etc where the value is - and that still needs smart people.
131
Reposted by Bruce ("grymoire") Barnett
Antronics Ltd @antronicsltd.bsky.social · 26/05/2026
It's Dunning Kruger all over again: people don't know or understand what actually goes into it, so assume it must be easy. The "how hard can it be...?" syndrome. 🙄
111